Workout

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: workout Version: 1.1.0 The skill bundle is designed to interface with a `workout` command-line interface (CLI) tool. All instructions in `SKILL.md` are focused on guiding the AI agent to correctly use the `workout` CLI for tracking workouts, managing exercises, and logging sets. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection attempts. The 'CRITICAL RULES' in `SKILL.md` serve as benign instructions for the agent to ensure accurate and effective use of the workout tracking functionality, aligning with the stated purpose.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used incorrectly, the agent could remove or alter workout records or profiles.

Why it was flagged

The skill documents commands that can delete profiles, delete logged sets, or discard a session. These actions are purpose-aligned for a workout tracker, but they can change or remove user data.

Skill content
workout profile delete old; workout delete bench-press 3; workout cancel
Recommendation

Confirm destructive or corrective actions such as profile deletion, set deletion, or session cancellation before allowing the agent to run them.

What this means

The safety of actual command execution depends on the installed 'workout' CLI, which is outside this instruction-only artifact.

Why it was flagged

The skill depends on a local 'workout' binary, but the supplied artifacts do not provide provenance or installation details for that binary.

Skill content
Source: unknown; Homepage: none; Required binaries: workout; No install spec
Recommendation

Use this skill only with a 'workout' binary you installed intentionally from a trusted source.

What this means

Workout history, profile names, and notes may contain personal fitness or health-related information.

Why it was flagged

The skill persists and retrieves personal workout data and notes by profile. This is expected for the stated purpose, but users should recognize that fitness history and notes may be stored and reused for later analysis.

Skill content
Per-user data: Templates, workouts, config are per-profile; workout note "Session note"; workout history bench-press
Recommendation

Avoid entering sensitive medical details in workout notes unless you are comfortable storing them in the local workout CLI data.